$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft File: 4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft (raw, json) Hash identifier: WGBuAEDyZJIiZBVsJ64hC9DHsF4AhtrM2X5I248r1tk= Subject key identifier: 44:8D:B5:10:FB:17:B7:E0:42:7B:7D:E0:25:1A:E5:4F:29:83:27:0D Authority key identifier: D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F Certificate issuer: /CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59 Certificate serial: 216A6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft Manifest number: 0DA7 Signing time: Fri 29 Mar 2024 05:21:00 +0000 Manifest this update: Fri 29 Mar 2024 04:20:08 +0000 Manifest next update: Mon 01 Apr 2024 05:26:08 +0000 Files and hashes: 1: 38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa (hash: nsrvjXiEOOT8siaMeg3FgrmUi8dXFog10g1kb6dfpiI=) 2: 4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl (hash: lMsKkWk2CqvjFDc0FGyj3OnZCS7B257zCKTK85OOV10=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 01 Apr 2024 05:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189930 (0x216a6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59 Validity Not Before: Mar 29 04:20:08 2024 GMT Not After : Apr 1 05:26:08 2024 GMT Subject: CN=db1e5c38b8a308eb350569ad0d6077082dfbe155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:37:df:eb:71:59:5e:63:10:b1:af:e9:d8: e6:1f:46:17:15:7f:f1:b2:cc:81:17:1c:99:7a:8b: c1:16:6e:0c:7a:a4:46:bf:1d:e0:85:79:17:f1:d9: 65:17:ca:41:e7:e9:52:76:87:41:a8:c5:4a:15:36: 43:ff:55:9a:53:92:c7:3a:95:59:db:f6:77:82:86: ed:f3:42:3d:e4:65:3c:ab:85:e7:f9:b0:e3:ce:f6: a3:ae:f2:a8:8e:d3:c5:54:2e:61:8a:e2:9c:13:7f: 32:57:bc:e3:9e:2d:aa:46:b2:28:8d:10:5a:8b:82: 5f:fb:60:30:53:df:d3:4f:b7:42:cd:97:76:c6:cb: 80:ef:da:92:1f:e4:c0:96:b3:55:25:6a:d6:88:0f: 79:bf:98:80:14:6b:fc:df:d2:23:5a:83:69:5c:1e: 5d:bd:b9:1b:94:42:36:00:67:5f:56:bf:be:80:14: 12:2d:d2:2f:df:dc:9a:e3:d5:f8:e5:19:78:4d:c0: a7:a1:15:3b:70:16:1b:34:1c:99:72:2c:6e:92:5c: a4:32:55:e2:e8:2e:e7:81:b4:ad:89:80:74:26:62: 63:b2:cb:de:0e:92:91:58:04:b5:b1:9c:05:56:b0: 99:09:ba:12:0c:00:06:6c:82:69:d2:f7:8e:80:44: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:B5:10:FB:17:B7:E0:42:7B:7D:E0:25:1A:E5:4F:29:83:27:0D X509v3 Authority Key Identifier: keyid:D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3d:ea:e8:78:af:e0:a0:c0:17:e4:16:8d:57:0d:e4:73:aa: 46:08:36:5c:d4:4b:fa:40:47:91:97:22:e1:56:d5:65:58:6c: 75:de:7c:7f:6b:e9:d4:82:8e:f6:72:1f:c4:0b:7c:df:b7:c5: f6:3f:86:8c:6a:76:a1:d8:3c:73:b2:04:b8:af:d0:0a:99:46: 92:bf:4b:fd:f0:5d:fd:e3:17:93:ae:64:67:0c:b4:69:d6:ab: b2:52:3f:7e:02:e6:49:76:44:6d:89:c9:bb:b5:48:b1:9c:d9: 19:43:b3:60:de:18:70:cc:a2:e1:3b:28:e5:ee:49:70:a5:fc: b3:60:53:94:4d:f8:65:1f:58:08:32:fc:1c:9c:e1:0f:1b:57: 04:9f:46:ab:00:56:a4:9e:b8:63:36:39:5d:0b:d8:3f:40:a9: db:11:0d:4b:9a:5f:62:6c:f6:8c:93:9b:a1:5a:68:03:6e:1c: 67:5d:7b:ed:c1:19:4e:01:27:87:81:bd:9b:ad:d0:a1:49:f0: dd:e6:35:55:d0:e2:26:b1:fe:5e:c1:d1:df:60:1d:0e:a7:f5: b0:23:0f:a9:eb:1a:1b:be:04:b2:28:c2:9e:8b:64:a2:70:c6: 11:52:b3:5f:63:a3:c0:cf:1b:e3:5f:88:b4:38:0c:bc:e7:43: ca:7c:ba:b9 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIDIWpqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRl ZjBkYzVjMzJiNjJhZGE3YWVlNGVmOGRkNWM1N2NkNzdkN2FkNTkwHhcNMjQwMzI5 MDQyMDA4WhcNMjQwNDAxMDUyNjA4WjAzMTEwLwYDVQQDEyhkYjFlNWMzOGI4YTMw OGViMzUwNTY5YWQwZDYwNzcwODJkZmJlMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAtO833+txWV5jELGv6djmH0YXFX/xssyBFxyZeovBFm4MeqRG vx3ghXkX8dllF8pB5+lSdodBqMVKFTZD/1WaU5LHOpVZ2/Z3gobt80I95GU8q4Xn +bDjzvajrvKojtPFVC5hiuKcE38yV7zjni2qRrIojRBai4Jf+2AwU9/TT7dCzZd2 xsuA79qSH+TAlrNVJWrWiA95v5iAFGv839IjWoNpXB5dvbkblEI2AGdfVr++gBQS LdIv39ya49X45Rl4TcCnoRU7cBYbNByZcixuklykMlXi6C7ngbStiYB0JmJjssve DpKRWAS1sZwFVrCZCboSDAAGbIJp0veOgEQ4IwIDAQABo4ICdDCCAnAwHQYDVR0O BBYEFESNtRD7F7fgQnt94CUa5U8pgycNMB8GA1UdIwQYMBaAFNFNM2P0eykFCLPw Cd/97Kn5cZovMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGVmMGRj NWMzMmI2MmFkYTdhZWU0ZWY4ZGQ1YzU3Y2Q3N2Q3YWQ1OS5jZXIwgZoGCCsGAQUF BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p Yy5uZXQvcnBraS9sYWNuaWMvZThjMmI5MWQtMzRlZC00OGE0LWIyNzYtNWJlN2Mw NTM4MmNhLzRlZjBkYzVjMzJiNjJhZGE3YWVlNGVmOGRkNWM1N2NkNzdkN2FkNTku bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj bmljLm5ldC9ycGtpL2xhY25pYy9lOGMyYjkxZC0zNGVkLTQ4YTQtYjI3Ni01YmU3 YzA1MzgyY2EvNGVmMGRjNWMzMmI2MmFkYTdhZWU0ZWY4ZGQ1YzU3Y2Q3N2Q3YWQ1 OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI hvcNAQELBQADggEBAIQ96uh4r+CgwBfkFo1XDeRzqkYINlzUS/pAR5GXIuFW1WVY bHXefH9r6dSCjvZyH8QLfN+3xfY/hoxqdqHYPHOyBLiv0AqZRpK/S/3wXf3jF5Ou ZGcMtGnWq7JSP34C5kl2RG2Jybu1SLGc2RlDs2DeGHDMouE7KOXuSXCl/LNgU5RN +GUfWAgy/Byc4Q8bVwSfRqsAVqSeuGM2OV0L2D9AqdsRDUuaX2Js9oyTm6FaaANu HGdde+3BGU4BJ4eBvZut0KFJ8N3mNVXQ4iax/l7B0d9gHQ6n9bAjD6nrGhu+BLIo wp6LZKJwxhFSs19jo8DPG+NfiLQ4DLznQ8p8urk= -----END CERTIFICATE-----Generated at Fri Mar 29 06:00:51 2024 by rpki-client on console-fra.rpki-client.org